ICS Advisory: Softing edgeConnector

Here is a short summary of the provided document:

Summary:

The View CSAF document reports on two vulnerabilities in Softing's edgeConnector and edgeAggregator products, versions 3.60, which can allow remote code execution. The first vulnerability is a path traversal flaw that could allow an attacker to write to or overwrite files on the filesystem. The second vulnerability is a cleartext transmission of sensitive information, allowing an attacker to capture and craft packets. CVSS scores are 7.2 and 8.0, respectively. Recommended mitigations include updating the software to version 3.70 or greater, minimizing network exposure, and implementing defensive measures such as firewalls and VPNs. CISA encourages organizations to monitor for suspicious activity and report findings. No public exploitation has been reported at this time.